序

本文介绍下如何自定义AuthenticationEntryPoint

自定义AuthenticationEntryPoint

public class UnauthorizedEntryPoint implements AuthenticationEntryPoint {    @Override    public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) throws IOException, ServletException {        if(isAjaxRequest(request)){            response.sendError(HttpServletResponse.SC_UNAUTHORIZED,authException.getMessage());        }else{            response.sendRedirect("/login");        }    }    public static boolean isAjaxRequest(HttpServletRequest request) {        String ajaxFlag = request.getHeader("X-Requested-With");        return ajaxFlag != null && "XMLHttpRequest".equals(ajaxFlag);    }}

默认情况下登陆失败会跳转页面，这里自定义，同时判断是否ajax请求，是ajax请求则返回json，否则跳转失败页面

设置UnauthorizedEntryPoint

@Override    protected void configure(HttpSecurity http) throws Exception {        http                .exceptionHandling().authenticationEntryPoint(new UnauthorizedEntryPoint())                .and()                .csrf().disable()                .authorizeRequests()                .antMatchers("/css/**", "/js/**","/fonts/**").permitAll()                .anyRequest().authenticated()                .and()                .formLogin()                .loginPage("/login")                .permitAll()                .and()                .logout()                .logoutUrl("/logout")                .permitAll();    }